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DETAILED ACTION 



1 . This Office Action is responding to the Amendment received on 09/26/2005. 

2. Claims 1-26 are pending. 

Response to Arguments 

3. Applicant's arguments, see Amendment, filed 09/26/2005, with respect to the 
rejection(s) of claim(s) 1-26 under 35 USC § 103(a) have been fully considered 
and are persuasive. Therefore, the rejection has been withdrawn. However, 
upon further consideration, a new ground(s) of rejection is made in view of 
Dorenbos and Smith. See below. 



Claim Rejections - 35 USC § 103 



4. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 
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5. Claims 1-26 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Dorenbos, US Patent No. 5751813, in view of Smith etal, US Patent No. 6061448, 
hereinafter "Smith". 

6. As per claim 1: 

Dorenbos teaches "A computer-implemented method for securely transmitting an 
information package from a sender to an addressee via a network (Fig. 1), the method 
comprising a server system performing the steps of: receiving a delivery from the 
sender, the delivery comprising: the information package encrypted with a package 
encryption key (Fig 2, User Private key); and a package decryption key (User ID) 
encrypted with an escrow key (Fig 2, #105, Encryption Server Public key); storing the 
delivery in escrow for the addressee; sending to the addressee a notification of the 
delivery; and in response to receiving an acknowledgement from the addressee : 
obtaining a new public key of the addressee (Fig 4 # 409, Col 4 lines 55-60); decrypting 
the package decryption key (Col 3 lines 26-30); encrypting the package decryption key 
with the addressee's new public key (Col 3 lines 32-36, and Col 4 lines 55-60); and 
transmitting to the addressee the information package encrypted with the package 
encryption key and the package decryption key encrypted with the addressee's new 
public key (Col 3 lines 32-38). 

However, Dorenbos does not directly teach of the decryption key. 

Nevertheless, Dorenbos teaches of encrypting the User ID of the sender with the 
package and the receiver or addressee uses the User ID to obtain the correct 
decryption key to decrypt the message. Therefore, it would have been obvious at the 
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time of the invention was made for one ordinary skill in the art to modify Dorenbos 
invention to include the encryption key with the delivery so that the user does not need 
to store the sender key to decrypt the message. 

Further, Dorenbos does not teach of storing the delivery in escrow for the 
addressee: sending to the addressee a notification of the delivery: and in response to 
receiving an acknowledgement from the addressee : 

Nevertheless, Smith discloses a "Method and System for Dynamic Server 
Document Encryption" invention, which including a server computer sends, receives, 
and stores secure data provided by authorized users. Server computer receives the 
encrypted document from user, stores it securely, and sends notification to the recipient. 
In response to the recipient response, the server sends the delivery to the recipient (Col 
5 lines 5-30). 

Therefore, it would have been obvious at the time of the invention was made for 
one having ordinary skill in the art to modify Dorenbos's invention to incorporate Smith's 
storage and notification feature to make sure that the user is ready to receive the 
delivery. 

7. As per claims 1 1 , and 1 8: 

Dorenbos teaches "A system, a method and an apparatus for securely transmitting an 
information package from a sender to an addressee via a network (Fig. 1), the system 
comprising: a storage module, comprising a computer-readable storage medium, for 
receiving, and storing in escrow, a delivery from the sender , said delivery comprising: a 
package decryption key (User ID) encrypted with an escrow key, and the information 
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package encrypted with a package encryption key (Fig 2, #105, Encryption Server 
Public key); a notification module coupled to the storage module, for sending a 
notification to the addressee via the network : a key registration module coupled to the 
notification module for, in response to receiving an acknowledgement from the 
addressee, receiving a new public key of the addressee : and a transmission module 
coupled to the storage module , for decrypting the package decryption key and re- 
encrypting the package decryption key with the new public key of the addressee (Col 3 
lines 32-36, and Col 4 lines 55-60), and for transmitting to the addressee the information 
package encrypted with the package encryption key and the package decryption key 
encrypted with the addressee's new public key (Col 3 lines 32-38). 

However, Dorenbos does not directly teach of the decryption key. 

Nevertheless, Dorenbos teaches of encrypting the User ID of the sender with the 
delivery and the receiver or addressee uses the User ID to obtain the correct decryption 
key to decrypt the message. Therefore, it would have been obvious at the time of the 
invention was made for one ordinary skill in the art to modify Dorenbos invention to 
include the encryption key with the delivery so that the user does not need to store the 
sender key to decrypt the message. 

Further, Dorenbos does not teach of a notification module coupled to the storage 
module, for sending a notification to the addressee via the network : a key registration 
module coupled to the notification module for, in response to receiving an 
acknowledgement from the addressee, receiving a new public key of the addressee. 
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Nevertheless, Smith discloses a "Method and System for Dynamic Server 
Document Encryption" invention, which including a server computer sends, receives, 
and stores secure data provided by authorized users. Server computer receives the 
encrypted document from user, stores it securely, and sends notification to the recipient. 
In response to the recipient response, the server sends the delivery to the recipient (Col 
5 lines 5-30). Further, Smith also teaches of a key registration module to receive a new 
public key of the recipient or addressee (Col 5 lines 9-1 9). 

Therefore, it would have been obvious at the time of the invention was made for one 
having ordinary skill in the art to modify Dorenbos's invention to incorporate Smith's 
storage and notification feature to make sure that the user is ready to receive the 
delivery. 

8. As per claims 2 and 19: 

Dorenbos and Smith teach "The method of claims 1 and 18". Further Smith discloses 
"the server system performing the steps of: receiving a request from the sender for a 
public key of the addressee; determining whether the addressee has a public key; and 
in response to not finding a public key of the addressee: transmitting the escrow key to 
the sender" in (Col 5 lines 5-15). 

9. As per claims 3 and 20: 

Dorenbos and Smith teach "The method of claims 2 and 19". Wherein Smith discloses 
"the step of determining whether the addressee has a public key comprises the 
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sub-step of: checking a public key database for a public key of the addressee" in (Col 6 
lines 40-65). 

10. As per claims 4 and 21: 

Dorenbos and Smith teach "The method of claims 1 and 18". Further Smith discloses 
"the server system performing the steps of: in response to the sender searching a public 
key database for a public key of the addressee and not finding a public key of the 
addressee: receiving a request from the sender for the escrow key; and transmitting the 
escrow key to the sender" in (Col 6 lines 40-65). 

11. As per claims 5, 13-14, and 22: 

Dorenbos and Smith teach "The method of claims 1,11, and 18". Further Smith 
discloses "the server system performing the steps of: registering and issuing the new 
public key to the addressee; and storing the addressee's new public key in a public key 
database" in (Col 5 lines 1-15). 

1 2. As per claims 6 and 1 5: 

Dorenbos and Smith teach "The method of claims 1 and 11". Wherein Smith discloses 
"the escrow key is one of a group comprising a symmetric key and an asymmetric key" 
in (Col 4 lines 8, asymmetric key equals to public/private key). 

13. As per claims 7, 16, and 23: 

Dorenbos and Smith teach "The method of claims 1,11, and 18". Wherein Smith 
discloses "the notification is one of a group comprising an e-mail notification, a desktop 
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notification, a voice notification, a pager notification, and a facsimile notification" in (Col 
5 lines 1-15). 

14. As per claims 8 and 24: 

Dorenbos and Smith teach "The method of claims 1 and 18". Further Smith discloses 
"the server system performing the steps of: receiving from the sender a digest of one 
from a group comprising: the information package; the information package encrypted 
with the package encryption key; and the information package encrypted with the 
package encryption key and the package decryption key encrypted with the escrow key; 
and in response to receiving the acknowledgement from the addressee: transmitting the 
digest to the addressee" in (Col 5 lines 1-30, and Col 6 lines 40-67). 

15. As per claims 9, 25: 

Dorenbos and Smith teach "The method of claims 8 and 25". Wherein Smith discloses 
"the digest is encrypted by a private key of the sender" in (Col 3 lines 1-6). 

16. As per claim 12: 

Dorenbos and Smith teach "The system of claim 11". Further Smith discloses "a 
directory interface coupled to the storage module for checking, in response to receiving 
a request from the sender for a public key of the addressee, a public key database for 
the public key of the addressee; and an escrow key manager coupled to the directory 
interface for providing, in response to the directory interface failing to obtain a public key 
of the addressee from the public key database, an escrow key for encrypting the 
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package decryption key" in (Col 5 lines 1-52, public key of the addressee is interpreted 
as the escrow key). 

17. As per claims 10, 17, and 26: 

Dorenbos and Smith teach "The computer-readable medium of claims 1,11, and 18". 
Further Smith discloses "program code adapted to perform the step of: authenticating 
the addressee prior to transmitting the information package encrypted with the package 
encryption key and the package encryption key encrypted with the addressee's new 
public key" in (Col 5 lines 1-53) and the rejection of claim is incorporated. 

1 8. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Linh LD Son whose telephone number is 571- 
272-3856. The examiner can normally be reached on 9-6 (M-F). 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kim Vu can be reached on 571-272-3859. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 



Application/Control Number: 09/881 ,899 Page 10 

Art Unit: 2135 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 
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